Discount domains DNS servers Down?

Forums › New Zealand Broadband › Discount domains DNS servers Down?

1 | 2 | 3 | 4 | 5 | 6

477 posts

Ultimate Geek
+1 received by user: 114

#3136490 29-Sep-2023 12:19

bertgt:
awojtas: Has anyone investigated transferring their domain from DiscountDomains to another provider while DD is down?
I've only ever done transfers where both source and destination domain hosts were up and responding.

Unless you have a valid/current UDAI you can't transfer the domain (to my knowledge).

We can't get UDAIs until we can log into DD. And since many UDAI and transfer systems include emails with "click here to approve" if you have no email access (or mail flow) due to missing DNS that just adds an extra layer of difficulty.

I wonder if the DNC can step in at some point and provide a way to be sent UDAI's but as you say - Even then if the registrant email is on an affected domain that isn't going to help much.

I knew they had gone downhill a bit when I moved my 37 domains away but I never really expected anything this bad. The lack of communication is concerning and I can't help but be nervous that even when service returns all of the DNS records might be gone.

The whole point of multiple DNS servers should stop this being as much of an issue as it is so they obviously never really tested their DNS redundancy.

Matt Beechey Mobius Network Solutions

hamishf

6 posts

Wannabe Geek

#3136491 29-Sep-2023 12:20

DanD:

Definitely moving my domains after this (and this will be the last time I have anything sitting with NZ service providers that don't have the infrastructure/systems to manage issues timely and effectively).

Discount Domains aren't really an NZ service provider. They were acquired by last year Dreamscape Networks who are operated out of Singapore and the Philippines, and are themselves owned by an American company. As far as I can tell none of their operation is run locally any more.

bertgt

22 posts

Geek
+1 received by user: 3

#3136496 29-Sep-2023 12:30

@mobiusnz

I've been in touch with the DNC already and have asked.
All the rep politely sais is they are aware of the issues with FP & DD this morning and point me to their network status pages.

mobiusnz

477 posts

Ultimate Geek
+1 received by user: 114

#3136497 29-Sep-2023 12:32

bertgt: @mobiusnz

I've been in touch with the DNC already and have asked.
All the rep politely sais is they are aware of the issues with FP & DD this morning and point me to their network status pages.

It does pose the question of what is DNC's plan if a registrar is hacked, goes rogue or into receivership due to a hack / crash??

Matt Beechey Mobius Network Solutions

bertgt

22 posts

Geek
+1 received by user: 3

#3136500 29-Sep-2023 12:35

Actually I have to eat my shoe... A DNC rep has just said they can help provide UDAIs.

Although I have no mail flow at the moment (because no DNS) so this may not get very far.

AskewDread

4 posts

Wannabe Geek

#3136501 29-Sep-2023 12:36

We contacted DNC and they confirmed they are able to provide us a UDAI if we require it, so there is a way around it

Dell

Shop now for Dell laptops and other devices (affiliate link).

mobiusnz

477 posts

Ultimate Geek
+1 received by user: 114

#3136502 29-Sep-2023 12:37

bertgt:

Actually I have to eat my shoe... A DNC rep has just said they can help provide UDAIs.

Although I have no mail flow at the moment (because no DNS) so this may not get very far.

It has crossed my mind on numerous occasions that ones registrant email shouldn't be on a domain with the same registrar (Or worse still the domain its registrant for) but we all say "It won't happen to me thought".

Matt Beechey Mobius Network Solutions

ItsAlwaysDNS

5 posts

Wannabe Geek
+1 received by user: 4

#3136504 29-Sep-2023 12:51

After a lovely ~90 minutes of holding and listening to their brain-numbing hold music, we were advised that the team currently do not have access to any of their servers.

This is despite each collection of servers being in different locations, separated subnets, etc.

They are also internally having issues accessing their own various systems.

Best case scenario at the moment - someone did a horrible thing to their networking and took everything offline. They find and resolve (quickly!)

Otherwise, this is shaping up to be a possible ransomware even unless DD advise specifically otherwise.

The DNC (Domain Name Commission) has advised that they can grant UDAI to facilitate relocation of your domains but there may be several security and validation hoops to get through to have this processed.

Fingers crossed for a timely resolution!

mobiusnz

477 posts

Ultimate Geek
+1 received by user: 114

#3136507 29-Sep-2023 12:55

ItsAlwaysDNS:

After a lovely ~90 minutes of holding and listening to their brain-numbing hold music, we were advised that the team currently do not have access to any of their internal servers.

This is despite each collection of servers being in different locations, separated subnets, etc. and that they are also internally having issues accessing their own systems.

Best case - someone did a horrible thing to their networking and took everything offline.

Otherwise, this is shaping up to be a possible ransomware even unless DD advise specifically otherwise.

The DNC (Domain Name Commission) has advised that they can grant UDAI to facilitate relocation of your domains but there may be several security and validation hoops to get through to have this processed.

Fingers crossed for a timely resolution!

I'm starting to lean toward Hack/Ransomware as otherwise I'd expect to see some sort of expected resolution by now. Even with a hack / ransomware you'd think by now they'd have a backup restored for one of the servers by now so I think its been a morning of "Why don't we just restore from Here....... Oh shit, they got that too".

This is baaaaaaad even if they do eventually have everything back working as it was before the event as this has just been too long - They are going to hemorrhage clients the minute things are back up.

Matt Beechey Mobius Network Solutions

ItsAlwaysDNS

5 posts

Wannabe Geek
+1 received by user: 4

#3136510 29-Sep-2023 12:59

mobiusnz:

I'm starting to lean toward Hack/Ransomware as otherwise I'd expect to see some sort of expected resolution by now. Even with a hack / ransomware you'd think by now they'd have a backup restored for one of the servers by now so I think its been a morning of "Why don't we just restore from Here....... Oh shit, they got that too".

This is baaaaaaad even if they do eventually have everything back working as it was before the event as this has just been too long - They are going to hemorrhage clients the minute things are back up.

Also depends on what is backed up and what is breached. i.e. host vs hypervisor. Surely in any case given the critical nature of the systems they host there would be VM backups in addition to offsite SAN backups /shrug

mobiusnz

477 posts

Ultimate Geek
+1 received by user: 114

#3136512 29-Sep-2023 13:03

ItsAlwaysDNS:

Also depends on what is backed up and what is breached. i.e. host vs hypervisor. Surely in any case given the critical nature of the systems they host there would be VM backups in addition to offsite SAN backups /shrug

Ah the sweet sweet learnings that come when the proverbial hits the fan.

Had a client (small assistance here and there, mostly self managed) who had a DR plan for their SAS website. Decided to do a test run with a small outage window advertised at a timezone appropriate time - It didn't work and ended up having the whole thing down for hours..... At least they worked it out before they really needed it.

Matt Beechey Mobius Network Solutions

HP

Shop now for HP laptops and other devices (affiliate link).

Obraik

2167 posts

Uber Geek
+1 received by user: 1347

#3136516 29-Sep-2023 13:10

I just wanna point out that @ItsAlwaysDNS has the best username for this situation

Looking to buy a Tesla? Use my referral link and we both get credits

DanD

2 posts

Wannabe Geek

#3136518 29-Sep-2023 13:12

mobiusnz:

ItsAlwaysDNS:

After a lovely ~90 minutes of holding and listening to their brain-numbing hold music, we were advised that the team currently do not have access to any of their internal servers.

This is despite each collection of servers being in different locations, separated subnets, etc. and that they are also internally having issues accessing their own systems.

Best case - someone did a horrible thing to their networking and took everything offline.

Otherwise, this is shaping up to be a possible ransomware even unless DD advise specifically otherwise.

The DNC (Domain Name Commission) has advised that they can grant UDAI to facilitate relocation of your domains but there may be several security and validation hoops to get through to have this processed.

Fingers crossed for a timely resolution!

I'm starting to lean toward Hack/Ransomware as otherwise I'd expect to see some sort of expected resolution by now. Even with a hack / ransomware you'd think by now they'd have a backup restored for one of the servers by now so I think its been a morning of "Why don't we just restore from Here....... Oh shit, they got that too".

This is baaaaaaad even if they do eventually have everything back working as it was before the event as this has just been too long - They are going to hemorrhage clients the minute things are back up.

Am I the only one tossing up whether to play UDAI roulette rn? If I play, and then everythings back online... I've got to rebuild cnames,a,mx with some domains being really complicated in setup (note to self to keep a hard copy of dns settings for future) which may take waaay more time. Conundrum.

bertgt

22 posts

Geek
+1 received by user: 3

#3136521 29-Sep-2023 13:13

Obraik: I just wanna point out that @ItsAlwaysDNS has the best username for this situation

Shhhhh. When you look into when that GZ forum account was created you'll give the conspiracy theorists a reason to start pointing the finger and say you started this it's all your fault.... /s

ItsAlwaysDNS

5 posts

Wannabe Geek
+1 received by user: 4

#3136523 29-Sep-2023 13:18

bertgt:

Obraik: I just wanna point out that @ItsAlwaysDNS has the best username for this situation

Shhhhh. When you look into when that GZ forum account was created you'll give the conspiracy theorists a reason to start pointing the finger and say you started this it's all your fault.... /s

I did just make the account so I could post my reply (hence the fresh creation time) but it's a keeper not a throwaway :P

My second choice was UnholyDonut but ItsAlwaysDNS seemed more appropriate this time around 🤣

1 | 2 | 3 | 4 | 5 | 6